@sema-agent/server 7.142.0 → 7.143.0

package/dist/trace/self-minted-wire.js

@@ -45,7 +45,6 @@ export const SELF_MINTED_WIRE = {
             "memory.erasure_evidence_unavailable": { attr: 409, since: "7.108.0" },
             "memory.erasure_selector_mismatch": { attr: 409, since: "7.108.0" },
             "memory.erasure_census_incomplete": { attr: 409, since: "7.108.0" },
-            "memory.erasure_store_unjudged": { attr: 409, since: "7.140.0" },
             "internal.memory_control_plane_corrupt": { attr: 500, since: "7.108.0" },
         },
     },
@@ -381,9 +380,6 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
             "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(同键重放的体 = 首答的信封 + replay: true:终局 = 引擎结果(result 是串),停驻 = 结果 + 回执三键,行还在跑 = 回执三键;流式腿放进 done.result)": { attr: 200, since: "7.142.0" },
         },
-        retired: {
-            "POST /v1/tasks|/v1/tasks/stream#replay_run_read_face(同键重放的体 = GET /v1/runs/:id 的读面 + replay: true:result 是对象,外加 status / errorCode / heldBy 等读面键)": { attr: 200, since: "7.125.0", until: "7.142.0" },
-        },
     },
     builtinScenario: {
         at: "GET /v1/capabilities#scenarios[] 内建成员",
@@ -435,12 +431,48 @@ export const SELF_MINTED_WIRE = {
             aliases: { attr: "always", since: "7.135.0" },
         },
     },
+    modelPlaneKey: {
+        at: "GET /v1/models modelPlane.<键>(<键> → 在场律)",
+        members: {
+            servedTable: { attr: "always", since: "7.133.0" },
+            catalog: { attr: "always", since: "7.133.0" },
+            refusalCode: { attr: "present-iff the boot route judge refuses the table in force", since: "7.133.0" },
+            gap: { attr: "present-iff the boot route judge refuses the table in force", since: "7.133.0" },
+            planeRefusalCode: { attr: "present-iff the latest arriving catalog candidate is refused at the model plane group", since: "7.143.0" },
+        },
+    },
     approvalRequestCardKey: {
         at: "approval_request 帧 card.<键>(活铸帧的 card · 落库的卡信封 card_json · 断连重放帧的 card)",
         members: {
             approvalCard: { attr: "present-iff", since: "7.136.0" },
         },
     },
+    approvalRequestReplayFact: {
+        at: "approval_request 断连重放帧顶层(断流续读 · 开流 preamble · livePending 接管行 / 按问读口的 frame)",
+        members: {
+            mandated: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            mandate: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            origin: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            boundGrantDigest: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            boundGrants: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            classifierNoRuling: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            boundGrantAbsence: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            approvalCard: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            readRootCandidate: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            probeReason: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            requestedBy: { attr: "present-iff recorded on the ask row (same value as the live frame)", since: "7.143.0" },
+            liveFactsUnknown: { attr: "present-iff the ask row carries no readable live facts (replay frames only)", since: "7.143.0" },
+        },
+    },
+    livePendingAdoptedRowKey: {
+        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tool-approvals/:id pending 体(起服接管行)",
+        members: {
+            mandated: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
+            mandate: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
+            origin: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
+            liveFactsUnknown: { attr: "present-iff row.frame.liveFactsUnknown (adopted rows only)", since: "7.143.0" },
+        },
+    },
     approvalQueuePendingKey: {
         at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)",
         members: {
@@ -449,6 +481,51 @@ export const SELF_MINTED_WIRE = {
             classifierNoRuling: { attr: "present-iff", since: "7.136.0" },
         },
     },
+    approvalQueueKind: {
+        at: "GET /v1/approvals pending[].kind · GET /v1/approvals/stream pending / resolved 帧的 kind(恒带)",
+        members: {
+            checkpoint: { attr: "-", since: "7.143.0" },
+            peer_inbound: { attr: "-", since: "7.143.0" },
+        },
+    },
+    peerInboundRowKey: {
+        at: "GET /v1/approvals pending[] 的 peer_inbound 行 · GET /v1/approvals/stream 的 peer_inbound pending 帧(<键> → 在场律)",
+        members: {
+            kind: { attr: "always", since: "7.143.0" },
+            id: { attr: "always", since: "7.143.0" },
+            recipientSessionId: { attr: "always", since: "7.143.0" },
+            lane: { attr: "always", since: "7.143.0" },
+            cause: { attr: "always", since: "7.143.0" },
+            content: { attr: "always", since: "7.143.0" },
+            sentAt: { attr: "always", since: "7.143.0" },
+            heldAt: { attr: "always", since: "7.143.0" },
+            fromSession: { attr: "present-iff", since: "7.143.0" },
+            fromName: { attr: "present-iff", since: "7.143.0" },
+            fromScope: { attr: "present-iff", since: "7.143.0" },
+        },
+    },
+    peerInboundLane: {
+        at: "GET /v1/approvals pending[] 的 peer_inbound 行 lane",
+        members: {
+            session: { attr: "-", since: "7.143.0" },
+            principal_inbox: { attr: "-", since: "7.143.0" },
+        },
+    },
+    approvalsResolvedFrameKey: {
+        at: "GET /v1/approvals/stream resolved 帧(<键> → 在场律;只登本版新增的)",
+        members: {
+            kind: { attr: "always", since: "7.143.0" },
+            id: { attr: "present-iff kind = peer_inbound", since: "7.143.0" },
+        },
+    },
+    peerInboundDecideBodyKey: {
+        at: "POST /v1/approvals/:id/decide 200 体(peer_inbound 族;<键> → 在场律)",
+        members: {
+            kind: { attr: "always", since: "7.143.0" },
+            id: { attr: "always", since: "7.143.0" },
+            outcome: { attr: "always", since: "7.143.0" },
+        },
+    },
     constraintRejectedBodyKey: {
         at: "409 resume.constraint_rejected 拒体(<键> → 在场律)",
         members: {
@@ -519,6 +596,8 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(settings.permissions.deny|ask)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.deny|ask 带层条目 { rule, layer }(新提交;layer = 设置来源词)": { attr: 200, since: "7.141.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.141.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.allow 带层条目 { rule, layer }(新提交;layer = 设置来源词)": { attr: 200, since: "7.143.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#allow 桶里 user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + field settings.permissions.allow + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.143.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
@@ -531,13 +610,34 @@ export const SELF_MINTED_WIRE = {
             "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)": { attr: 404, since: "7.139.0" },
             "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)": { attr: 409, since: "7.139.0" },
             "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)": { attr: 200, since: "7.139.0" },
-            "GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
-            "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)": { attr: 409, since: "7.140.0" },
-            "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
-            "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
-            "POST /v1/memory/sync/:scope#identity_undeclared(DB 记忆平面没声明 MEMORY_SYNC_SERVE_IDENTITY;鉴权之后;体 feature.memory_sync_serve_disabled)": { attr: 501, since: "7.142.0" },
-            "POST /v1/memory/sync/:scope#peer_not_declared_identity(peer 不是同步身份的规范形 / 带凭据 / 非 http(s) / 超宽 / 空串;体 request.field_invalid + field peer + reason)": { attr: 400, since: "7.142.0" },
-            "POST /v1/memory/sync/:scope#peer_not_this_center(peer 是规范形但不等于本中心声明的身份;零读零写;体 config.memory_sync_target_mismatch)": { attr: 409, since: "7.142.0" },
+            "GET /v1/memory/entries/:entryId/provenance|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署有两只店 —— 盘上的店集:个人挂载上有个人店;体 request.memory_layer)": { attr: 400, since: "7.143.0" },
+            "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)": { attr: 400, since: "7.143.0" },
+            "POST /v1/memory/erase#grant_spans_two_stores(expectedScopes 的层分住两只店;体 config.memory_erasure_scope,什么都没删、什么都没记)": { attr: 400, since: "7.143.0" },
+            "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#reaches_second_store(点名的层住在个人店 / 按会话或按 id 抹除而另一只店里有那一份;每只到达的店各擦各的那一份,收执合成一份)": { attr: 200, since: "7.143.0" },
+            "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#requestId_reused_across_stores(同一个 requestId 先在一只店执行过、再换选择子或落到另一只店;体 memory.erasure_selector_mismatch,什么都没删、什么都没记)": { attr: 409, since: "7.143.0" },
+            "POST /v1/sessions/:id/memory/erase#body.scope(层座退役;体 request.body_shape)": { attr: 400, since: "7.143.0" },
+            "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
+            "POST /v1/memory/sync/:scope#any(同步口改到 /v2;旧路径无人认领;体 not_found.route)": { attr: 404, since: "7.143.0" },
+            "POST /v2/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;任何读写之前;体 request.memory_layer)": { attr: 400, since: "7.143.0" },
+            "POST /v2/memory/sync/:scope#identity_undeclared(DB 记忆平面没声明 MEMORY_SYNC_SERVE_IDENTITY;鉴权之后;体 feature.memory_sync_serve_disabled)": { attr: 501, since: "7.143.0" },
+            "POST /v2/memory/sync/:scope#peer_not_declared_identity(peer 不是同步身份的规范形 / 带凭据 / 非 http(s) / 超宽 / 空串;体 request.field_invalid + field peer + reason)": { attr: 400, since: "7.143.0" },
+            "POST /v2/memory/sync/:scope#peer_not_this_center(peer 是规范形但不等于本中心声明的身份;零读零写;体 config.memory_sync_target_mismatch)": { attr: 409, since: "7.143.0" },
+            "POST /v2/memory/sync/:scope#partition_reset(一轮的最后一次写之后分区化身已变;体 internal.error)": { attr: 500, since: "7.143.0" },
+            "POST /v1/approvals/:id/decide#peer_inbound_decided(:id 带 peer_inbound: 前缀,调用方自己的、成因人能答的被扣来信;体 { kind, id, outcome })": { attr: 200, since: "7.143.0" },
+            "POST /v1/approvals/:id/decide#peer_inbound_keys_do_not_apply(体带 decision 以外的停驻门键;体 request.body_shape + unsupportedKeys)": { attr: 400, since: "7.143.0" },
+            "POST /v1/approvals/:id/decide#peer_inbound_store_refused(信箱店拒了决断那一步,什么都没决;体 state.peer_decision_unrecorded)": { attr: 503, since: "7.143.0" },
+            "POST /v1/approvals/:sessionId/decide#tool_approval_decided_without_boundInputHash(工具审批门;只回显 boundCallId 或一位都不回显;门型守卫之后;体 decide_requires_binding + bindingEnforced + missingKeys;卡仍 pending)": { attr: 400, since: "7.143.0" },
+            "POST /v1/approvals/:sessionId/decide#replay_without_boundInputHash(首决已结清、同一份体不带 boundInputHash 重发;体 not_found.approval)": { attr: 404, since: "7.143.0" },
+            "GET /v1/sessions/:id#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "GET /v1/sessions/:id/memory-status#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "POST /v1/sessions/:id/memory/erase#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "GET /v1/sessions/:id/head#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "GET /v1/sessions/:id/events#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "GET /v1/sessions/:id/execution-placement#owner_unreadable(DB_BACKEND=local;行事实没有落下 ∧ 存档读不出 ⇒ 属主不可判;体 not_found.session,与非属主 / 不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "POST /v1/sessions/:id/notify#occupant_changed_before_delivery(属主门读过之后、投递之前会话被删或同 id 换了住客;零投递;体 not_found.session,与不存在同码同文)": { attr: 404, since: "7.143.0" },
+            "GET /v1/capabilities/mcp#engine_name_collision(中心声明两台归一后同挂一个工具命名空间前缀,引擎在任何传输被触碰之前整集拒;体 config.mcp_server_name_collision + 引擎原句;与同步提交腿同一张码 → 状态表)": { attr: 409, since: "7.143.0" },
+            "POST /v1/tasks#engine_name_collision(同步腿;同一份声明集被引擎整集拒;零工作的拒;体 config.mcp_server_name_collision)": { attr: 409, since: "7.143.0" },
+            "POST /v1/rules/local-import/prepare#tightening_write_failed(一条收下的 deny / ask 写不进店;这一批的放行扣下、没有票;体 state.rule_write_failed + committed,同 POST /v1/rules)": { attr: 503, since: "7.143.0" },
         },
     },
     memoryLayerSeatKey: {
@@ -546,8 +646,7 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/memory/entries/:entryId/provenance#query.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers", since: "7.140.0" },
             "GET /v1/memory/origin/clearances#query.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers", since: "7.140.0" },
             "POST /v1/memory/origin/entries/:entryId/clear#body.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;not passed to the engine", since: "7.140.0" },
-            "GET /v1/sessions/:id/memory-status#query.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ every store of this deployment, folded;cache keyed by (session, store control plane)", since: "7.140.0" },
-            "POST /v1/sessions/:id/memory/erase#body.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ the deployment's store;selector still minted from the path", since: "7.140.0" },
+            "GET /v1/sessions/:id/memory-status#query.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers (that store's engine answer);absent ⇒ the deployment's answer (the engine folds every store on disk);cache keyed by (session, store control plane | deployment)", since: "7.140.0" },
         },
     },
     sessionMemoryStatusKey: {
@@ -563,7 +662,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     memorySyncIdentityFlaw: {
-        at: "400 request.field_invalid reason(POST /v1/sessions/:id/memory/sync 的 target · POST /v1/memory/sync/:scope 的 peer;另带 field)",
+        at: "400 request.field_invalid reason(POST /v1/sessions/:id/memory/sync 的 target · POST /v2/memory/sync/:scope 的 peer;另带 field)",
         members: {
             "not-http-url": { attr: "-", since: "7.142.0" },
             userinfo: { attr: "-", since: "7.142.0" },
@@ -580,10 +679,37 @@ export const SELF_MINTED_WIRE = {
             "body#target": { attr: "required;the only key;the target engine's GET /v1/capabilities memorySyncServe.identity verbatim;not a declared sync identity ⇒ 400 request.field_invalid", since: "7.142.0" },
             "200#target": { attr: "always;engine report verbatim", since: "7.142.0" },
             "200#sourceRevision": { attr: "always;the session leafId read in the same head read as the owner gate", since: "7.142.0" },
-            "200#scopes": { attr: "always;the read set: latest settled run's effectiveMemoryScopes (mounted ⇒ scope keys in serving order; memoryless / none ⇒ [])", since: "7.142.0" },
+            "200#scopes": { attr: "always;the read set: latest settled run's effectiveMemoryScopes (mounted ⇒ scope keys in serving order; none ⇒ []; memoryless ⇒ no read set, 409 reason memory_not_mounted)", since: "7.143.0" },
             "200#layers": { attr: "present-iff no whole-round refusal;one entry per read-set layer the round ran (engine outcome synced | incomplete | refused | failed)", since: "7.142.0" },
             "200#refused": { attr: "present-iff whole-round refusal;{code: config.memory_sync_target_mismatch | session_active, message}", since: "7.142.0" },
             "409 conflict.session_memory_unobserved#activeTaskId": { attr: "present-iff the session has a run in flight", since: "7.142.0" },
+            "409 conflict.session_memory_unobserved#reason": { attr: "always;closed set sessionMemoryUnobservedReason, judged in read order (no settled run → the latest settled run's observation gives no read set: empty observation or memory not mounted → no leaf);the message is a function of reason", since: "7.143.0" },
+        },
+    },
+    centralMemorySyncWire: {
+        at: "POST /v2/memory/sync/:scope(<面>#<键> → 读法 / 在场律)",
+        members: {
+            "path#version": { attr: "/v2/memory/sync/:scope (the engine's path);/v1/memory/sync/… is unclaimed ⇒ 404 not_found.route", since: "7.143.0" },
+            "body#peerIncarnation": { attr: "optional;the client cursor's peerIncarnation verbatim;1..128 chars else 422 memory_sync_invalid_body;compared with the scope partition's incarnation before any read or write", since: "7.143.0" },
+            "200#cursor.incarnation": { attr: "always on a result;the scope partition's incarnation (minted when the partition is first read by a sync, then stored);equals the claim when one was made", since: "7.143.0" },
+            "200#refused": { attr: "present-iff the round is refused on the incarnation axis;\"baseline_incarnation\";the claim is not the partition's incarnation, or a non-empty baseRevs with no claim;nothing read or written", since: "7.143.0" },
+            "200#incarnation": { attr: "present-iff refused;the scope partition's incarnation", since: "7.143.0" },
+        },
+    },
+    sessionMemoryUnobservedReason: {
+        at: "409 conflict.session_memory_unobserved reason(POST /v1/sessions/:id/memory/sync)",
+        members: {
+            no_settled_run: { attr: "-", since: "7.143.0" },
+            run_result_missing: { attr: "-", since: "7.143.0" },
+            run_result_unobserved: { attr: "-", since: "7.143.0" },
+            memory_not_mounted: { attr: "-", since: "7.143.0" },
+            no_leaf: { attr: "-", since: "7.143.0" },
+        },
+    },
+    decideRequiresBindingBodyKey: {
+        at: "400 decide_requires_binding 拒体(<键> → 在场律)",
+        members: {
+            missingKeys: { attr: "always;non-empty subset of [boundCallId, boundInputHash] in that order (absent or empty string ⇒ missing)", since: "7.143.0" },
         },
     },
     refusalSentenceForm: {
@@ -599,7 +725,7 @@ export const SELF_MINTED_WIRE = {
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
             "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": { attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.141.0" },
-            "400 request.field_invalid#settings.permissions.allow.bad_entry": { attr: "<field>[<index>] is not a string — every entry must be a permission-rule string (a settings layer's { \"rule\", \"layer\" } entry is read in deny / ask only). …", since: "7.141.0" },
+            "400 request.field_invalid#settings.permissions.allow.bad_entry": { attr: "<field>[<index>] is neither a rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.143.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers[i].not_object": { attr: "head: a2aPeers[i] is <shape>, not an A2A peer declaration (an object)", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
@@ -620,12 +746,28 @@ export const SELF_MINTED_WIRE = {
             "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag": { attr: "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)", since: "7.139.0" },
             "409 conflict.session_mirror#PATCH /v1/sessions/:id": { attr: "this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written", since: "7.139.0" },
             "409 conflict.session_row_changed#PATCH /v1/sessions/:id": { attr: "the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag", since: "7.139.0" },
+            "400 decide_requires_binding#POST /v1/approvals/:sessionId/decide": { attr: "decide requires the decision-action binding — echo boundCallId and boundInputHash exactly as the pending approval you are deciding shows them (GET /v1/approvals), so a decision on a view that has since been replaced is refused instead of landing on the gate that replaced it", since: "7.143.0" },
+            "400 request.body_shape#/decide.root_shape": { attr: "body must be { decision: 'approve' | 'deny', boundCallId, boundInputHash, reason?, answer?, checkpointToken?, updatedInput?, remember?, decidedBy?, feedback? }", since: "7.143.0" },
+            "409 conflict.session_memory_unobserved#run_result_missing|run_result_unobserved": { attr: "the latest settled run in this session has no memory observation on record, and an earlier run is never read in its place — run another task in this session (…), then sync", since: "7.143.0" },
+            "409 conflict.session_memory_unobserved#memory_not_mounted": { attr: "memory was configured for the latest settled run in this session but did not mount, so which memory this session reads is unknown, and an earlier run is never read in its place — run another task in this session (…), then sync", since: "7.143.0" },
+            "409 conflict.session_memory_unobserved#no_leaf": { attr: "this session has no transcript yet, so there is no revision to sync from — run a task in it (…), then sync", since: "7.143.0" },
         },
     },
     decisionBodyKey: {
         at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
         members: {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
+            "POST /v1/tool-approvals/:id/respond#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid (this door: request.body_shape)", since: "7.143.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid", since: "7.143.0" },
+            "POST /v1/approvals/:sessionId/decide#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
+        },
+    },
+    resumeRestatementKey: {
+        at: "续跑门族请求体(POST /v1/approvals/:id/decide · /v1/assistant/tasks/:id/plan_review · /v1/assistant/tasks/:id/resume · /v1/sessions/:id/wake)的重述键",
+        members: {
+            a2aPeers: { attr: "optional;submit-shape;present⇒replaces-stored-table+written-back;absent|null⇒frozen;direct-door(decide,plan_review)⇒400 restatement_not_in_proof", since: "7.143.0" },
+            mcpServers: { attr: "optional;submit-shape;present⇒replaces-stored-table+written-back;absent|null⇒frozen;direct-door(decide,plan_review)⇒400 restatement_not_in_proof", since: "7.143.0" },
         },
     },
     sessionRowWriteKey: {
@@ -686,6 +828,7 @@ export const SELF_MINTED_WIRE = {
             1: { attr: "base", since: "7.51.0" },
             2: { attr: "+liveness_no_output", since: "7.133.0" },
             3: { attr: "+name_too_long", since: "7.137.0" },
+            4: { attr: "+symlink_loop", since: "7.143.0" },
         },
     },
     hookNonBlockingFailureReason: {
@@ -750,12 +893,17 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].semantics": { attr: "required-on-device-lane;ws-url-or-literal-none;none-with-bindings-warns", since: "7.141.0" },
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].derivedDefaultNote": { attr: "no-default;absent-refuses-boot", since: "7.141.0" },
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].enumValues": { attr: "none(echoed-verbatim)", since: "7.141.0" },
+            "GET /v1/config/catalog#rows[MODEL_ROUTER_ID].derivedDefaultNote": { attr: "absent=>classifier-role-in-served-table", since: "7.143.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
-            "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)": { attr: "fold-across-deployment-stores(sum|max|any-record|absent-if-any-unreadable);one-store⇒identity", since: "7.140.0" },
+            "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)": { attr: "engine-deployment-fold(memory.deployment_status.fold:sum|latest|any-record⇒true+record|all-false⇒false|else optOutSource:fault);store set = stores on disk;one-store⇒identity", since: "7.140.0" },
+            "GET /v1/models#modelPlane.catalog(refused 的模型面那一半)": { attr: "latest-arrival", since: "7.143.0" },
+            "SSE text_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "SSE reasoning_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "GET /v1/runs/:id/subagents/:handle/stream#reasoning_end.content": { attr: "whole-segment-for-late-subscriber", since: "7.143.0" },
         },
     },
 };

package/dist/trace/wire-projection-faces.d.ts

@@ -219,7 +219,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly task_notification: {
         readonly projector: "taskNotificationEventData";
         readonly coreType: `TaskNotificationPayload & ${string}`;
-        readonly excluded: readonly ["peer", "crossSessionMessage", "crossSessionNotice", "inboxNotice"];
+        readonly excluded: readonly ["peer", "crossSessionMessage", "crossSessionNotice", "inboxNotice", "received"];
         readonly unwrapped: readonly ["notification"];
         readonly minted: readonly ["injected"];
     };

package/dist/trace/wire-projection-faces.js

@@ -45,7 +45,7 @@ export const WIRE_PROJECTION_FACES = {
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,
-        excluded: ["peer", "crossSessionMessage", "crossSessionNotice", "inboxNotice"],
+        excluded: ["peer", "crossSessionMessage", "crossSessionNotice", "inboxNotice", "received"],
         unwrapped: ["notification"],
         minted: ["injected"],
     },

package/dist/verifier-pause-card.d.ts

@@ -1,8 +1,36 @@
-import { type CardVoidPort } from "./card-void.js";
 /**
- * 结果上若有验证器自己的停驻(带凭据)⇒ 作废它那张 pending 卡;否则零 I/O。**必须在出口封口之前调**(封口摘掉的正是这里要用的凭据)。
- * 不抛:作废失败只让卡回到修前的形(由兜底收割),响亮留痕({@link VOID_FAILED});结算照常往下走。
- * 卡已不 pending / 已不在 ⇒ 什么都不做(CAS 输给了收割,结局相同)。卡的会话与停驻报的验证器会话不一致 ⇒ 不动它(只作废**这一张**)。
+ * **验证器自己的停驻卡,结算时当场作废** —— 本服务兑现不了它,就不让它挂在待决面上;动词是引擎的 `Runner.voidVerifierPause`。
+ *
+ * ## 这张卡是什么
+ * 验证门(core `runWithVerification` / `resumeWithVerification`)里,**验证器腿**自己在耐久门上停住时,引擎把那次停驻交回在
+ * `verification.verifierPause`(`unverifiedReason: "verifier_paused"`),实现腿照常 `completed`,run 照常终局。那张卡落在验证器
+ * **现铸的会话**上,不在本 run 的会话上 —— 宿主判官看不见它(`terminal.ts` 的 `atHostBoundary`:它不在结果因由里);
+ * 卡上记着它是谁的哪条腿(`CheckpointState.compositionLeg`,`entry: "verify"`)。
+ *
+ * ## 为什么作废,而不是留着等人决
+ * 本服务的续跑链按会话把一张卡连回 run(决定腿读这只会话的续跑输入);验证器会话上没有续跑输入 ⇒ `/decide` 恒答
+ * `409 conflict.resume_context_unavailable`。即便能续上,验证器跑完的判词也回不到那条已经终局的 run。判据只有一条,与
+ * `parked-decide.ts` 的「复活不了的卡作废」同一条:**本服务兑现不了的卡不留在待决面上**。
+ *
+ * ## 规则(一条读法)
+ * 「手里这张是不是验证器的卡」只有引擎答:`Runner.voidVerifierPause(token)` 读卡上的组合腿,只作废 `entry: "verify"` 的卡
+ * (别的卡拒 `resume.composition_mismatch`,一行不动),作废 = 与到期同一只 CAS(行 `expired`)+ 本进程持有的停驻环境销毁 +
+ * **释放验证器会话的钉**。本文件只答「结果上有没有那枚凭据」,不读店、不比会话、不判腿 —— 服务端不留第二份读法。
+ * 动词必须是**跑过这次验证门的那只 Runner** 的(停驻环境的回收记录在它手里)。
+ *
+ * ## 三问
+ *  · 谁要:看待决列表 / 审批收件箱的人与壳 —— 修前那里躺着一张点不动的卡;长寿副本 —— 修前每次验证器停驻都钉住一只会话直到进程重启;
+ *  · 谁伤:想让验证器把那一步做完的人 —— 修前也做不到(决不掉、判词回不到 run);run 的判词照旧是 `unverified` /
+ *    `verifier_paused`,停驻的门、状态、验证器会话 id 与 `checkpointId` 照旧在结果上(凭据由出口封口摘);
+ *  · 补偿:重新提交带 `verify` 的任务再验一次;作废没做成 ⇒ 卡回到修前的形(兜底收割),计数 + 一次性 warn 显形。
  */
-export declare function voidVerifierPauseCard(result: unknown, cards: CardVoidPort | undefined): Promise<void>;
+import type { Runner } from "@sema-agent/core";
+/** 结算点手里那只 Runner 的作废动词(跑过这次验证门的那只)。 */
+export type VerifierPauseVoider = Pick<Runner, "voidVerifierPause">;
+/**
+ * 结果上若有验证器自己的停驻(带凭据)⇒ 交引擎作废那张卡;否则零调用。**必须在出口封口之前调**(封口摘掉的正是这里要用的凭据)。
+ * 不抛:动词答 `false`(别的结算者先到了:续跑赢了 / 收割或更早的作废已到期它)⇒ 什么都不做;动词抛(卡不在、卡不是验证器的、
+ * 店抛、作废了但会话钉没放掉 `checkpoint.void_unpin_failed`)⇒ 结算照常往下走,响亮留痕({@link VOID_FAILED})。
+ */
+export declare function voidVerifierPauseCard(result: unknown, runner: VerifierPauseVoider): Promise<void>;
 //# sourceMappingURL=verifier-pause-card.d.ts.map

package/dist/verifier-pause-card.js

@@ -1,19 +1,24 @@
-import { voidPendingCard } from "./card-void.js";
+import { errorCodeOf, errorText } from "./observability/err-text.js";
+import { recordFailOpen } from "./observability/fail-open.js";
 const VOID_FAILED = "server.verifier-pause.card-void-failed";
-export async function voidVerifierPauseCard(result, cards) {
-    const pause = verifierPauseCardOf(result);
-    if (pause !== undefined)
-        await voidPendingCard(pause, cards, VOID_FAILED);
+export async function voidVerifierPauseCard(result, runner) {
+    const token = verifierPauseTokenOf(result);
+    if (token === undefined)
+        return;
+    try {
+        await runner.voidVerifierPause(token);
+    }
+    catch (e) {
+        recordFailOpen(VOID_FAILED, `code=${errorCodeOf(e) ?? "thrown"} err=${errorText(e)}`);
+    }
 }
-function verifierPauseCardOf(result) {
+function verifierPauseTokenOf(result) {
     if (result === null || typeof result !== "object")
         return undefined;
     const pause = result.verification?.verifierPause;
     if (pause === null || typeof pause !== "object")
         return undefined;
-    const { checkpointToken, sessionId } = pause;
-    return typeof checkpointToken === "string" && checkpointToken !== "" && typeof sessionId === "string"
-        ? { token: checkpointToken, sessionId }
-        : undefined;
+    const { checkpointToken } = pause;
+    return typeof checkpointToken === "string" && checkpointToken !== "" ? checkpointToken : undefined;
 }
 //# sourceMappingURL=verifier-pause-card.js.map

package/dist/web-admin-client/apply-effective.d.ts

@@ -13,6 +13,7 @@ import type { EffectiveConfig } from "./types.js";
 import { type ModelRefusalVerdict } from "../model-entry-refusal.js";
 import { type ConfigApplyReport } from "./apply-ledger.js";
 import { type ConfigCandidateRead } from "./candidate-gate.js";
+import type { CatalogSource } from "../env-model-table-gate.js";
 /** Apply center config OVER the env-derived config (mutates `config`). Empty domains keep env defaults. */
 /** Replace a record's contents IN PLACE (clear keys, copy source) so holders of the SAME reference see the
  *  change. This is what makes models/roles/pricing HOT-apply: core's Runner reads
@@ -50,6 +51,11 @@ export type ApplyLeg = {
     readonly checkpointStorePresent: boolean;
 };
 export type ApplyEffectiveOpts = ApplyLeg & {
+    /**
+     * 这份候选**从哪条配置腿来**(本地腿另带配置根上 env 模型表的决定在同一拍的读数)—— 模型面 stage 的本地腿确认闸只读它({@link stageModelPlane})。
+     * 必填、没有缺省腿(同 {@link ApplyLeg}):取自候选自己的 `FetchEffectiveResult.catalogSource`,LKG 读回 / 降档 / 按组回落的合成是中心腿的事(LKG 只在中心腿启用)。
+     */
+    readonly catalogSource: CatalogSource;
     readonly sealedKeys?: SealedKeyOpener;
     readonly generation?: number;
     readonly report?: (r: ApplyReport) => void;
@@ -94,28 +100,18 @@ export declare function withModelPlaneOf<E extends EffectiveConfig>(target: E, s
  */
 export declare function fullyLandedForLkg(read: ConfigCandidateRead, report: ApplyReport | undefined): boolean;
 /**
- * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**。组拒码闭集的属主是 settings-schema `MODEL_PLANE_REFUSAL_CODES`,每个码恰有**一个铸码方**,
- * 分两本账(下面两个表 + 三道编译门;那边加一个码而这两本都没收 ⇒ 本仓 tsc 红):
- *  · 本表 = **本仓模型面 stage 自己铸**的码 → 铸它的不变量。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 —— 一个 id 两个码
- *    (`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数;
- *  · {@link ENGINE_MINTED_PLANE_REFUSAL_CODES} = 契约包出码、执法者是本仓但**今天未执法**的码(名字里的 ENGINE 沿契约包的词义 = worker,即本仓),本仓 stage 现在不铸。
+ * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**,键集**恰是**契约包的组拒码闭集 `MODEL_PLANE_REFUSAL_CODES`(每个码恰有一个铸码方,就是本仓模型面 stage):
+ * 契约包加一个码而本表没收 ⇒ 本仓 tsc 红(`satisfies` 的映射型要求每个键)。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 ——
+ * 一个 id 两个码(`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数。
+ * (曾有第二本账 `ENGINE_MINTED_PLANE_REFUSAL_CODES`:契约包出码、执法者是本仓而尚未执法的码。本地腿确认闸落地后那一码由 stage 铸,第二本账与它的三道交叉门一并退役 —— 一本账、一道门。)
  */
 export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.default_model_missing": "default-model-resolvable";
     readonly "config.model_refused_name_minted": "refused-names-not-minted";
     readonly "config.model_route_endpoint_missing": "model-route-endpoint";
     readonly "config.gateway_fallback_without_primary": "model-route-endpoint";
+    readonly "config.catalog_replaces_env_models": "env-table-replacement-acknowledged";
 };
-/**
- * 契约包出码、执法者是本仓但今天**未执法**的组拒码:本地配置腿上「管模型面的目录会顶替已声明的 env 表、决定不是 `replaced`」那道闸。
- *
- * 词义:settings-schema 发布说明里的「engine / 引擎一侧」指**本仓(worker)**,不是 `@sema-agent/core` —— 这个码要的全部输入(本地配置腿、env 表、模型面 stage 与组拒口)只在本仓,core 里没有读
- * `MODEL_ID` / `config.d` 的地方、也没有组拒码。所以本仓 stage 现在没有对应的不变量、不铸这个码,不是因为「归引擎」,而是**还没做**:
- *  · `CATALOG_REPLACES_ENV_MODELS_CODE`:执法是一整组跨仓件 —— 开机迁移 SS-M11(铸决定文档)· 本地腿每拍读决定(读数身份进候选的 etag)· 目录信任判官走根级文档 · 命令行 / 桌面 / 客户端核心三个写者先接契约包的计划助手;
- *    候设计票。在那之前,候选目录管着模型面而 env 表也声明了时,仍照旧由目录服务(与升级前逐位同)。
- * 这个码开始被铸之后,它进 `/health.modelRefusals.plane` 的座位是**另案设计**(现在没有座:见 `model-plane-face.ts` 对「装配期被引擎整份拒收」的披露),不在这张表里偷铸一个不变量替它占位。
- */
-export declare const ENGINE_MINTED_PLANE_REFUSAL_CODES: readonly ["config.catalog_replaces_env_models"];
 /**
  * [ref] —— **「无中心配置」档的候选**:中心凭证换人时,server 把在用的中心配置降到这一档({@link applyEffective} 吃它,和吃任何候选走同一条 stage → swap → commit)。
  * 它的意思是「**撤回**中心配置」—— 中心下发的每个热面回 env 底:
@@ -159,5 +155,5 @@ export declare function applyRuntimeHot(config: ServiceConfig, gov: EffectiveCon
  * (env-derived) config, WITHOUT applying it. The safe-rollout step the web-admin recommends — verify
  * the center's models/roles match (or intentionally differ from) the env baseline before going live.
  */
-export declare function logEffectiveDiff(config: ServiceConfig, eff: EffectiveConfig, logger?: Logger): void;
+export declare function logEffectiveDiff(config: ServiceConfig, eff: EffectiveConfig, catalogSource: CatalogSource, logger?: Logger): void;
 //# sourceMappingURL=apply-effective.d.ts.map